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Abstract. Mazur proved that any element ^ of order three in the Shafa- 
revich-Tate group of an cUiptic curve E over a number field k can be made 
visible in an abclian surface A in the sense that ^ lies in the kernel of the 
natural homomorphism between the cohomology groups {Ga,l{k / k) , E) — > 
(Ga.l{k/k), A). However, the abelian surface in Mazur's construction is 
almost never a jacobian of a genus 2 curve. In this paper we show that any 
element of order three in the Shafarevich-Tate group of an elliptic curve over a 
number field can be visualized in the jacobians of a genus 2 curve. Moreover, 
we describe how to get explicit models of the genus 2 curves involved. 

1. Introduction 

Let E be an elliptic curve over a field k with separable closure k. We write 
H^{k,E[3]) := H^{Gsd{k/k), E[3]{k)) for the first galois cohomology group taking 
values in the 3-torsion of E (the notation A) is used similarly for other group 

schemes A/k later in this paper). Wc are primarily concerned with the question 
which S S H^{k, E[3]) are visible in the jacobian of a genus 2 curve. Mazur defines 
visibility in the following way. Let O^-iJ^-A— s-B— s-Obca short exact 
sequence of abelian varieties over k. By taking galois cohomology, we obtain the 
exact sequence 

(1.1) A{k) >B{k) >H\k,E)^-^H^{k,A) . 

Elements of the kernel of (f> arc said to be visible in A. Mazur chose this term 
because a model of the principal homogeneous space corresponding to an element 
^ G {k, E) that is visible in A can be obtained as a fiber of A over a point in B{k) 
(this can readily be seen from (|1.1[) ). By extension, we say that 5 S iJ"'^(fc, i?[n]) 
is visible in A if the image of 5 under the natural homomorphism H^(k,E[n]) — > 
H^{k,E) is visible in A. 

Let us restrict to the case that fc is a number field for the rest of this section. 
Inspired by some surprising experimental data [5], Mazur [5] proved, that for any 
element ^ in the Shafarevich-Tate group UI{E/k) of order three, there exists an 
abelian variety A over k such that ^ is visible in A. The abelian variety that Mazur 
constructs is almost never principally polarizable over k and hence is almost never 
a jacobian of a genus 2 curve. In the present paper, we show that any element 
from III(i?/fc)[3] is in fact visible in the jacobian of a genus 2 curve. Moreover, we 
describe how to get an explicit model of such a genus 2 curve. 
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2. TORSORS AND THETA GROUPS 



Throughout this section let > 1 be an integer, let fc be a perfect field of 
characteristic not dividing n and let E denote an elliptic curve over k. In [T], many 
equivalent interpretations are given for the group H^{k,E[n\). For our purposes, 
we need two classes of objects. The first is most closely related with descent in 
general and our question in particular. We consider E'-torsors under E[n]{k) and, 
following [T], call them n-covcrings. 

Definition 2.1. An n-covcring tt : C — >• of an elliptic curve E is an unramified 
covering over k that is galois and irreducible over fc, with A\it-^{C / E) ~ E[ri\{k). 
Two n-coverings tti : Ci — > i?, 7r2 : C2 — > -B are called isomorphic if there exists a 
A:-morphism : Ci — >■ C2 such that tti = 7r2 o (p. 

Over fc, all n-coverings are isomorphic to the trivial n-covering, the multiplication- 
by-n map [n] : E E. 



The k-isomorphism classes of n-coverings 



Proposition 2.2 ([1] Proposition 1.14] 
of E are classified by H^{k, E[n]). 

For 6 G {k, E[n]) we denote by Cs the curve in the covering Cs E corre- 
sponding to 5. We remark that 5 £ £'[71]) has trivial image in H^{k,E) if 
and only if Cs has a fc-rational point. 

We write O for the identity on E. The complete linear system |n • 0| determines 
a morphism E — > P"^^, where the translation action of E[n\ extends to a linear 
action on P"~^. This gives a projective representation E[n] PGL„. The lift of 
this representation to GL„ gives rise to a group Qe, which fits in the following 
diagram. 



(2.1) 



-4 6, 



-i-E[n] 



-4GL„ 



-^PGL^ 



-4 1 



-41 



The group E[n]{k) carries additional structure. It also has the Weil pairing be, 
which is a non-degenerate alternating galois covariant pairing taking values in the 
n-th roots of unity 

CE : E[n]{k) x E[n]{k) ^inik). 

The commutator of Qe corresponds to the Weil pairing, meaning that for x,y £ Qe 
we have 

xyx~^y~'^ = aE{eE{PE{x),f3E{y)))- 
Definition 2.3. A theta group for E[n] is a central extension of group schemes 



1 







1 



such that the Weil-pairing on E[n\ corresponds to the commutator, i.e. for x,y E Q 
we have 

xyx'^y''^ ^ a{eE{P{x),f3{y))). 

Two theta groups 

1 ^ G,„ ^ e,, ^ E[n] ^1, i = 1, 2 
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are called isomorphic if there exists a group scheme isomorphism 
k making the following diagram commutative. 



9i 62 over 



1 



-^61 



-y E\n] 



1 



-^62 



—y E[n] )■ 1 

Over k, all theta-groups are isomorphic to Qe as central extensions; see [TJ 
Lemma 1.30]. 

Proposition 2.4 ([Tl Proposition 1.31]). Let E[n] be the n-torsion subscheme of 
an elliptic curve E over a field k, equipped with its Weil pairing. The isomorphism 
classes of theta-groups for E[n] over k are classified by H^(k, E[n]). 

The thcta group associated to (5 G H^{k, E[n]) may allow for a matrix repre- 
sentation Q -> GL„ that fits in a diagram like (|2.ip . This is measured by the 
obstruction map Ob introduced in [3] and |T[. This map can be obtained by taking 
non-abelian galois cohomology of the defining sequence of O^;: 

>H\k, Qe) H^{k,E[n]) ^ H^{k,<G^) = Br(fc) ■ ■ ■ . 

Note that, except in some trivial cases, Ob is not a group homomorphism. The map 
Ob also has an interpretation in terms of n-coverings. Let C — > be an n-covering 
associated to (5 G H^{k,E\n]). We have that Ob((5) = if and only if C admits 
a model C — s> P"^i with Avl%-^{C/E) = £'[3](fc) acting linearly, in which case C 
is fc-isomorphic to £^ as a curve and the covering C ^ E is simply a translation 
composed with multiplication-by-n. 

Remark 2.5. Note that if /c is a number field, then any element in Br(fc) that 
restricts to the trivial element in Br(fc„) in all completions k^, of fc, is trivial itself. 
It follows that Ob is trivial on the n-Selmer group S^'^\E/k). 



3. Visibility in surfaces 

Let El be an elliptic curve over a perfect field k of characteristic distinct from 
3. In what follows, we win consider 5 e £'i[3]) with Oh{5) = 0. A possible 

way of constructing an abelian surface A such that 5 is visible in A starts by 
taking a suitable elliptic curve ii'2/fc together with a fc-group scheme isomorphism 
A : £'i[3] £'2(3]. Let A C -Ei x be the graph of - A so that 

A(fc) = {(P,-A(F) :Pei?i[3](fc)}. 

Let A := {Ei x E2)/A and write (/) : £'1 x i?2 — > ^ for the corresponding isogeny. 
Since A C Ei[3] x £2(3], wc have another isogeny 4>' : A ^ Ei x E2 such that 

(f)' o (f> = 3. We write p* for the composition Ei — > {Ei x E2) A and for 

the composition A ^ [Ei x E2) — > i?i and q*,q^: for the corresponding morphisms 
concerning £'2- It is straightforward to verify that p*,q* are embcddings, that 
(j) = p* + q* (where the projections are understood and we note that the + sign 
here corresponds to the — sign in the definition of A) and that 0' = x . 
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We combine the galois cohoniology of the short exact sequences 

0^ Ei^O, and 

E,[3] E, A E,^0 for i = 1,2 
to obtain the big (symmetric) commutative diagram with exact rows and columns 

E2{k) >A{k) 

3 9. 
E2ik) E^ik) 

a 

Ei{k) Ei{k) >H\k,A) >H^{k,Ei) 

p* 

A{k) El (fc) > 1 (fc, E2) > (fc, A) 

where we note that H'^{k,A) ~ H'^{k,Ei[3]) ~ H'^ {k , E2[3]) . We sec that 5 is 
visible in A precisely ii S € H^{k, Ei[3]) = H^{k,A) lies in the image of a, i.e., 
if the curve Cx(s) corresponding to X{6) e H^{k,E2[3]) has a rational point. We 
summarize these observations, which are due to Mazur. 

Lemma 3.1. Let Ei he an elliptic curve over a perfect field k of characteristic 
distinct from 3 and let S £ H^{k, E[3]) with Oh{S) = 0. Suppose that there exists 
an elliptic curve E2/k and a k-group scheme isomorphism A : i?i[3] — >■ i?2[3] such 
that the curve C^g^ corresponding to X{5) has a k-rational point. Then 6 is visible 
in the abelian surface {Ei x E2)/A where A denotes the graph of —X. 

Mazur also observed, in the case of a number field fc, that if (5 G S^^^{E/k), then 
Cg admits a plane cubic model. Furthermore, there is a pencil of cubics through the 
9 flexes of Cs , and each non-singular member corresponds to a 3-covcring Ct ^ Ef, 
where £'([3] ~ £'[3] and Ct — > Et represents 5. It is therefore easy to find a t such 
that C( has a rational point; simply pick a rational point and solve for t. To refine 
the construction, one can ask 

Question 3.2. Can one make S G H^{k, E[3]) visible in the jacobian of a genus 2 
curve? 

Note that Ei x E2 is principally polarized via the product polarization. This gives 
rise to a Weil pairing on {Ei x £2) [3], corresponding to the product pairing. If A is 
a jacobian, then A must be principally polarized over k. One way this could happen 
is if the isogeny p* + q* : Ei x E2 ^ A gives rise to a principal polarization. This 
would be the case if the kernel A is a maximal isotropic subgroup of Ei [3] x E2 [3] 
with respect to the product pairing. That means that A : i?i[3] £2 [3] must be 
an aniz-isometry, i.e. for all P,Q £ Ei [3] we must have 

e£,(A(P),A(g)) =eB,(P,Q)-i. 
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Note that the original cubic C is a member of the pencil that Mazur constructs, 
so in his construction A is actually an isometry, i.e. it preserves the Weil-pairing. 
Below we consider a pencil of cubics that leads to an anti-isomctry A. 

4. Anti-isometric pencils 

Let fc be a perfect field of characteristic distinct from 2,3. Following [S], we 
associate to a ternary cubic form F £ k[x,y,z] three more ternary cubic forms. 
Namely, the Hessian of F 



H{F) 





dF^ 


dF^ 


dxdx 


dxdy 


dxdz 


dF^ 


9F^ 


dF^ 


dydx 


dydy 


dydz 


dF'^ 


OF'^ 


dF^ 


dzdx 


dzdy 


dzdz 



the Caylean of F 



FiF) := 



1 

xyz 



dF I 

dx y 



y) 

z, 0, x) 



y) 



f|(-^,0,x) 

f(y,-3;,o) 



9F( 

dz ^y^ 



and a ternary cubic form denoted Q{F), for which we refer to [SJ Section 11.2]. 
For most cases one can take Q{F) to be H{P{F)) or P{H{F)), but there are some 
exceptional cases where P{F),Q{F) span an appropriate pencil and P{F),H{P{F)) 
do not. The left action of GL3 on fc"^ induces a right action of GL3 on ternary 
cubic forms (or, more generally, on k[x,y^z]). For a ternary cubic form F and an 
M G GL3 we denote this action simply by F o M. The significance of the three 
associated ternary cubic forms lies in the fact that H{F) depends covariantly on F 
(of weight 2) and P{F) and Q{F) depend contravariantly on F (of weights 4 and 6 
respectively). This means that for every ternary cubic form F and every M G GL3 
we have, with d :— det M that 



H{F o M) 
P{F o M) 
Q{F o M) 



(fH{F) o M 
d'^P{F) o M-"^ 
d^Q{F) o M 



-T 



where M~'^ denotes the inverse transpose of M. 

Now consider a smooth cubic curve C in given by the zero locus of a ternary 
cubic form F. Then C has exactly 9 different flex points $, which all lie on the (not 
necessarily smooth) curve given by H{F) = 0. The smoothness of C guarantees 
that F and H{F) will be linearly independent over k. Hence <I> can be described 
as the intersection F = H{F) = 0. We call $ the flex scheme of C . At least one of 
P{F) and Q{F) turns out to be nonsingular (still assuming that C is nonsingular) 
and the intersection P{F) = Q{F) = equals the flex points $* of the nonsingular 
cubics among P{F) and Q{F) (if, say, P{F) is nonsingular, then $* can of course 
also be written as P{F) = H{P{F)) = 0). 

We can consider the pencil of cubics through $, explicitly given by 

: sF{x, y, z) + tH{F){x, y, z) = 0. 

Classical invariant theory tells us the following. This pencil has exactly 4 singular 
members and all other members have flex scheme equal to <&. Conversely, any 
nonsingular cubic with flex scheme $ occurs in this pencil. Furthermore, both 
P{sF + tH{F)) and Q{sF + tH{F)) are linear combinations of P{F) and Q{F). 
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This shows that the flex scheme $* is independent of the choice of C through <I> 
and only depends on $. We call $* the dual flex scheme of $ and we will justify 
this name below. 

Remark 4.1. In the discussion above it was convenient to consider just one pro- 
jective plane P^. A more canonical way would be to consider a projective plane 
with coordinates x,y,z and the dual projective plane, denoted (P^)*, whose 
coordinates UjVjW are related to those of P^ by ux + vy + wz = 0. Now let C 
be a smooth cubic curve in P^ given by the zero locus of the ternary cubic form 
F{x, y, z) with flex scheme <&. The 9 tangent lines through $ determine 9 points in 
(P^)*. Generically, these 9 points in (P^)* will not be the flex points of a smooth 
cubic curve, hence generically there will a unique cubic curve going through these 
points. This curve in (P^)* is exactly given by the zero locus of the Caylean, i.e. 
P{F){u,v,w) = 0; see also [H pp. 151, 190-191]. Moreover, if the characteristic of 
k is zero, then it turns out that this cubic curve is nonsingular if and only if the 
j-invariant of C is nonzero. 

As a simple, but important example we take F := x^ + y^ + z^ . Then we compute 
H{F) = -lOSxyz, P{F) = -bAxyz, Q{F) ^ 324:{x^ + y^ + z^). 
Now dcflnc $0 to be the flex scheme of F = 0, i.e. 

(4.1) ^0 := {[x : y: z] e : x^ + y^ + z^ = xyz = 0}. 

Then we see that the flex scheme given by P{F) = Q{F) ~ (which is the flex 
scheme of Q{F) = 0) equals $o, i-C- 

Geometrically all flex schemes are linear transformations of each other. In par- 
ticular, for any flex scheme $ there exists an M G GL3(fc) such that $ = Af$o- 
The contravariance of P and Q implies that the assignment $ M- $* has the con- 
travariance property that for any flex scheme $ and M G GL3 

(4.2) (M$)* = A/~^$*. 

We also note that this implies that the assignment $ $** ($*)* is covariant 
in the sense that for any flex scheme $ and M G GL3 we have (M<I>)** = A/<i>**. 
Writing $ = M$o arid using ($0)** = $0 = *o we now get 

This justifles calling $* the dual flex scheme of <f>. 

To any flex scheme $ we associate a group 0($) C GL3 as follows. Choose a 
nonsingular cubic curve C through $ and let E be its jacobian. After identifying 
E and C as curves over fc, we get an action of £'[3] on C, which extends to a 
linear action on P^. This determines an embedding x '■ F[S\ ^ PGL3. Obviously, 
the image x(^'[3]) only depends on $. We define 9(<I') to be the inverse image of 
x(i?[3]) in GL3. Actually 6($) can be defined just in terms of without choosing 
C, since it turns out that x(i?[3]) consists exactly of the linear transformations 
that preserve (One way of quickly finding these linear transformations explicitly 
is by using the fact that, for any two distinct points of the line through these 
two points intersects $ in a unique third point.) The construction gives rise to the 
theta group 

1 ^ G,„ ^ e($) ^ E[?,] 1. 
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Note that the isomorphism class of this theta group may stih depend on the choice 
of identification of C with E. This corresponds to the choice of an isomorphism 
between 9('I>)/G„i and E[i]. If $ is defined over fc, then E[2,] and 6($) are also 
defined over k and the element in H^{k, E[3]) corresponding to this theta group is 
the same as the element corresponding to the 3-covering C — > C/i?[3] ~ E for any 
nonsingular cubic curve C through <f>. The construction also shows that for any 
M e GL3 we have 



(4.3) 



e(M$) = 7\/e($)M" 



Proposition 4.2. Let $1 C P'^ be a flex scheme and let $2 := 'I'l be the dual flex 
scheme. For i = 1, 2 let Ci be a smooth plane cubic with flex scheme <f>i, denote its 
jacobian by Ei and consider an induced theta group 



(4.4) 



^^e(<j>,)^i?.[3] 



1 



Then the outer automorphism (— T) : GL3 — GL3 given by M i-> M^^ , yields an 
isomorphism 0($i) — 0(<1>2)- There exists an anti-isometry A : i?i[3] — !■ E2[i] 
making the following diagram commutative. 



(4.5) 



1 



-4e($i) ^^^1 [3] > 1 



(-T) 



02 



>e($2)— ^S2[3] >i 



In particular, let Si € H^{k, £'i[3]) correspond to the theta group \4-4^ - Then under 
the isomorphism H^{k,Ei[i\) ~ H^{k,E2[i\) induced by A, the cocycle Si maps to 

S2- 

Proof. Once the isomorphism 9($i) — 6($2) given by M H> M~'^ is established, 
the existence of an isomorphism A : Ei [3] — > E2 [3] making the diagram (|4.5p com- 
mutative, follows immediately. That A must be an anti-isometry can readily be 
seen as follows. Let P,Q£ -Ei[3] and choose x,y G 6($i) such that P ~ I3i{x) and 
= /3i(y). Then 



a2(e£;,(A(P),A(Q))) = a2(eB,(/32(x-^), /32(y-'^))) 



-T - 

X y 



T T T 

X y 



[xyx ^y ^) 
ai(e£,(/3i(x),/3i(y)))-^ 
ai(e£,(P,Q)-i). 



The last statement of the proposition is also immediate, so we are left with estab- 
lishing (-T) : 6($i) ^ 6((f>2)- It suffices to show that for a flex scheme $ C 
we have 9(<i>)^^ = 9 (<&*). Write <I> = Af$o for some M e GL3 with $0 given by 
(|4.ip . Then a straightforward calculation shows that 9($o)~"^ = 9($o)- We also 
know that $5 = $0, so we get 9($o)"^ = 0(*S)- Together with (g^]) and (g^]) 
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e((A/$o)*) 
e($*). 

□ 

Remark 4.3. The construction above of the dual flex scheme $* of a flex scheme 
$ involved choosing a smooth cubic going through $. Without using theta groups, 
it was not obvious from this construction that the degree 9 etale algebra fc(<i>) is 
isomorphic to fc($*). However, there exists a nice explicit geometric construction of 
the dual flex scheme that remedies these shortcomings of the earlier construction. 
Given a flex scheme $, we proceed as follows. We label its 9 points over k with 
Pi, . . . ,Pg. There are 4 sets of 3 lines, (corresponding to the 4 singular member 
of the pencil of cubics through (f>) containing these points. We label the line that 
contains Pi,Pj,Pk with l[ij^k}- One can label the points such that the subscripts 
are 

{1,2,3} {1,4,7} {1,5,9} {1,6,8} 
{4,5,6} , {2,5,8} , {2,6,7} , {2,4,9} , 
{7,8,9} {3,6,9} {3,4,8} {3,5,7} 

Naturally, two different lines ^{ii,ji,fci}i '{i2,i9,fc9} meet in a unique point. If for 
example ii = 12, then the intersection point is Pi-^. If the two sets {ii,ji,fci} 
{*2, J2, ^2} are disjoint, then the two lines meet in a point outside $. We name this 
point i{i3j3,fc3}, where {ii, ji, fci, 12, j2, ^2, ^3, ja, ^3} = {l,---,9}. As it turns out, 
the four points that have i in their label all lie on a line pi. It is also straightforward 
to check that the pi together with the L^^jj^y form a configuration in (P^)* that 
is completely dual to the Pi with the l[ij^k}- The pi form the k points of a flex 
scheme in (P^)*, which is justifiably a fiex scheme $* dual to $, and its construction 
immediately implies the contravariancc property (Af(f>)* = M~"^$*. 

We can easily verify that the two constructions of $* coincide for one fiex scheme, 
for instance $o- The general result then follows because any fiex scheme can be 
expressed as M4>o for some AI € GL3(fc). 

Since the action of Gal(fc/fc) on {Pi, . . . , Pg} must act via collinearity-preserving 
permutations, we see that if cr(Pi) = Pcr{i) then a{pi) = Pa{i)- Hence, we see 
that the fc-points of $ and its dual have the same Galois action and hence fc($) is 
isomorphic as a fc-algebra to fc($*). 

5. Recovering the genus 2 curve 

Let be a field and let Ei , E2 be two elliptic curves over k with an anti-isometry 
A : El [3] — >■ £'2(3] and denote by A the graph of —A as before. Recall that Ei x E2 is 
principally polarized via the product polarization and that the induced polarization 
on A := {El x i?2)/A is also principal in this case. It is a classical fact that if A is 
not geometrically isomorphic to a product of elliptic curves, then A (together with 
its principal polarization) is isomorphic to the jacobian of a genus 2 curve C. Let 



we finally obtain. 
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US assume from now on that Ei and E2 are non-isogenous. In [7] it is shown that 
in this case A is always isomorphic over k to the jacobian of a genus 2 curve C/k. 
This is enough to get our main theoretical result. 

Theorem 5.1. Let E be an elliptic curve over a number field k and let ^ G 
III(ii'/fc)[3]. Then ^ is visible in the jacobian of a genus 2 curve C/k. 

Proof. Let S e S'-'^^E/k) be a cocycle representing ^. By Proposition 12.41 there 
is a 3-covering Cs ^ E corresponding to S. According to Remark 12.51 we have 
that Ob((5) = and hence that C5 C Let $ C be its flex scheme. The 
construction in Section |4] gives us a pencil of cubics through $*, so we can easily 
pick a non-singular one with a rational point. It follows from Proposition 14.21 that 
such a curve is of the form Ca(5) for some elliptic curve E2 and some anti-isometry 
A : E[3] E2[3]. 

This places us in the situation of Lemma |3. 11 so d is visible in an abelian surface 
A ^ {E X £^2) /A. We have ensured that A is an anti-isometry, which implies that 
the surface is principally polarized. As long as we make sure that E, E2 are non- 
isogenous (and this is easy given the freedom we have in choosing C\{5)) it follows 
that A is a jacobian. □ 

Remark 5.2. We could of course state a more general result about visibility of 
elements 6 G ^^[S]) with Ob((5) — for an elliptic curves E over a perfect 

field k of characteristic distinct from 2 or 3. Note however that if k is too small, 
there might not be enough non-isogenous elliptic curves available. The exclusion of 
fields of characteristic 3 is a serious one, the exclusion of non-perfect fields less so. 
Most of what we are saying could be generalized to the non-perfect case, basically 
because for an elliptic curve over any field of characteristic distinct from 3, the 
multiplication by 3 map is separable. The exclusion of fields of characteristic 2 
stems from the fact that the necessary invariant theory in this case is not readily 
available. 

We continue with the construction of the genus 2 curve C. Define the divisor 
Q :~QiX E2+E1X O2 on Ei x E2, which gives a principal polarization on Ei x E2. 
Next, consider the set T) of effective divisors on Ei x E2 over k which are linear 
equivalent to 30 and invariant under A. Also consider the set C of effective divisors 
C on A over k whose pull-back to Ei x E2 are linear equivalent to 30 and which 
satisfy (C ■ C) = 2. Frey and Kani show that there exist unique curves D € V and 
C G C defined over k which are invariant under multiplication by —1. Furthermore, 
because Ei and E2 are not isogenous, D and C are irreducible smooth curves of 
genus 10 and 2 respectively and the natural map D ^ C is unramified of degree 9. 

If is a perfect field of characteristic distinct from 2 or 3, the curves D and C can 
be explicitly constructed as follows. Embed Ei in P^, given by, say F{x,y,z) ~ 0, 
for a ternary cubic F/ k (such an F is readily obtained if Ei is given by a Weierstrass 
model). Express E2 as G := sP{F) + tQ{F) = for some s,t € k. This way, we 
obtain an embedding of Ei x E2 in P^ x P^ given by 

F(x, y, z) = G{u, V, w) ~ 0. 

Moreover, by appealing to Proposition 14. 21 we obtain that the curve on this surface 
given by xu + yv + zw = must be the curve D. The genus 2 curve C is the image 
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of D in {El X E2)/A. 

El X E2 

[3]x[3] 

El X E2 

The map [3] x [3] is much more accessible, though. Also observe that the hyper- 
surface {xu + yv + zw = 0} C X is only invariant under A C Ei[?,] x i?2[3]. 
A little extra work shows that the subgroup of i?i[3] x £'2[3] under which D is 
invariant is equal to A. Hence, we can find a model of C as a curve on Ei x E2 by 
computing ([3] x [3])(-D). This can easily be done via interpolation, as explained 
below by means of an example. 

6. Examples 

Following the first example in [31 Table 1], consider the elliptic curve 68151 (in 
Cremona's notation), given by the minimal Weierstrass equation 

Ei:y^ + xy = x^ + x^- 1154a; - 15345. 

It turns out that the plane cubic curve 

Ci : x^ + bx^y + 5x'^z + 2xy'^ + xyz + xz? + y^ - by'^z + 2yz^ + 6z^ = 

defines an element ^ (up to inverse) of order three in III(£^i/Q). The contravariants 
of the cubic above defining Ci, denoted Pq, Qq, are given by 

Po = -478x^ + 2525a;2y + 916a;^z-1127a;y2 + 29a;?/z 

-160x2^ + 753y3 _ 12282/2^ + 260yz2 + 301^^, 
Qo = -122314x''' + 618551a;2y + 191092x^2- 271157x1/2 - 7825x?/z 

-28120x^2 + 184011y3 - 264916^^2 + 55892yz2 + 73663z^ 

Now the curve 

C2 ■ 55033Po - 235Qo = 

has a rational point [x : y : z\ ~ [10 : 8 : 7] and its jacobian is the elliptic curve 
681cl, given by the minimal Weierstrass equation 

-E2 : + y = x^ - x^ + 2. 

To construct the corresponding genus two curve C such that ^ becomes visible 
in its jacobian we could now take the curve in Ci x C2 C P^ x P^ with coordinates 
{[x : y : z\t[u : V : w\) given by the equation xu + yu + zw = 0, and take its image 
under Ci x C2 Ei x E2, since this is a twist of [3] x [3] : Ei x E2 ^ Ei x E2 
anyway. We will follow Section [5] more closely. Obviously, Ei is given by F = if 
we define 

F y^z + xyz ~ (x^ + x'^z ~ WMxz^ - 15345z^). 
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The contravariants of the ternary cubic F are given by 

P = -2308a;^ + 3A62x^y - 5x^z - 275056xy^ + 5xyz 

+6xz^ + 136951y^ + 13853j/^z - Syz"^, 
Q = -725020a;3 + lOSTSSOa;^?/ + 27721a;2z - 65861608x2/2 - 2n2lxyz 
-30xz2 + 32749549y3 + 3217559^^2 + Ibyz^ + 2Az^ . 

Write j(s, t) for the j-invariant of the curve given by sP + tQ = Q. The j-invariant 
of E2 equals -4096/2043 and the equation j[s,t) = -4096/2043 has exactly one 
solution in P^(Q), namely [s : i] = [55033 : —235] (compare with the definition of 
C2). This gives us a new model for i?2, namely 

E2 : 55033P - 235Q = 0. 

We consider the surface Ei x E2 embedded in x as 

F{x, y, z) = 0, 55033P(u, 1;, w) - 235g(u, v, w) = 0. 

Now D is simply the curve on this surface given by 

xu + yv + zw = 0. 

The image of D under multiplication by 3 on E'l x E2 is the genus two curve C. 
Using the defining properties of C from Section [5] (such as the invariance under 
multiplication by —1), wc get that as a curve on Ei x E2 it must be of the form 

axu + byv + czw + dxw + ezu = 

for some a, &, c,d,e G Q. Now we simply generate 4 points on C (over a number 
field), compute the image under multiplication by 3 of these points and solve for 
a, 6, c, d, e. If the dimension of the solution space is greater than 1, we must of course 
add points (or take 4 better ones) so that the solution space becomes 1— dimensional. 
This gives us our equation for C. By a linear change of the u, v, w coordinates we 
can change the model for E2 back to the original minimal Weierstrass model. Thus, 
the model for Ei x E2 embedded in P^ x P^ is 

El : y^z + xyz = + x^ z - llbAxz'^ - 15345z^, 

E2 ■ V w + vw ~ u ~ u w + 2w 

and C is the curve on this surface given by 

Axu — 155zu + XV + 2yv — AOxw + yw + 1314z?« = 0. 

Hyperelliptic models for C are 

+ {X + 1)Y = 3X^ + 5X^ + - 8X^ - 5X + 2 or 

= {3X - 1){X + 1){4:X^ + 4:X^ -9). 

Next, consider the elliptic curve 2006el, given by the minimal Weierstrass equa- 
tion 

El -.y^ + xy ^ x^ + x^ - 58293654a; - 171333232940. 
It turns out that the plane cubic curve 

Ci : 2Qx^ + AAx^y + 21x^z - 77xy^ + Tlxyz + Uxz'^ + 3ly^ + iy'^z + I'oQyz'^ + = 

defines an element ^ (up to inverse) of order three in III(i?i/Q). In the sixth 
example in [21 Table 1] the elliptic curve E2 which 'explains' III(i?i/Q) is 2006c?l. 
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However, for this choice of _B2, there only exists an isometry between £'i[3] and 
i?2[3] and not an anti-isonietry. The corresponding abehan surface {Ei x i?2)/A 
visuahzing ^ wih not be the jacobian of a genus 2 curve. If instead we take for 
E2 the cUiptic curve 6018cl, then we do have an anti-isomctry between i?i[3] and 
i?2[3]. Following the same route as in the first example, we find that ^ is visible in 
the jacobian of the genus 2 curve C with hyperelliptic models 

+ (X^ + X)Y = -9675X^ - 94041X^ - 914X^ + 1301674X3 - 352310^^ 

-2071181X- 945269 or 

= 43(2X + 13)(18X2 -81X + 89)(25X3 + 193^2 + 224X + 76). 
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